This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
File:                     C424690F0D40D5A947CD0515B923B426E1FD684B.mft (raw, json)
Hash identifier:          EJuRgJ8ziLVBNND9HCtuHTDqU1KCadmCepcGCbzpch0=
Subject key identifier:   C4:FA:AE:CF:F9:B0:A6:2E:DC:03:1B:F7:D0:FC:F8:1B:42:66:99:21
Authority key identifier: C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
Certificate issuer:       /CN=C424690F0D40D5A947CD0515B923B426E1FD684B
Certificate serial:       0215FA3FF95F5C5A88CD6F88F706C2B08283F0FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
Manifest number:          11
Signing time:             Mon 22 Dec 2025 04:34:04 +0000
Manifest this update:     Mon 22 Dec 2025 04:29:04 +0000
Manifest next update:     Tue 23 Dec 2025 05:19:04 +0000
Files and hashes:         1: 3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa (hash: +poPvZLrUraCnucbl4+mSJTJ8I+NA4YB7d8JHcxuQ64=)
                          2: 3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa (hash: 03Ku4lAbU5/PD5JO4pdQrXHTni5TKP2/9DA2m870n0w=)
                          3: 3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa (hash: RGWehfx60vHbY+SHALVZ/LwjnA5g4oqW1WQkP8sLBYY=)
                          4: 323830343a373736343a3a2f33322d3332203d3e20323731313735.roa (hash: wCMiWUF4ntNhxzgbOk+qkux3nVge2Q4vRRcVa/+wlyk=)
                          5: 323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa (hash: vIZGy7i+IFXHzjQRUKx6oOpriH1IPTb4mS4wPSxz0KA=)
                          6: C424690F0D40D5A947CD0515B923B426E1FD684B.crl (hash: WMt4LYDJBzEzv+J7cjxsiDwiKRSTagG7F+4MwZbJYDE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:15:fa:3f:f9:5f:5c:5a:88:cd:6f:88:f7:06:c2:b0:82:83:f0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C424690F0D40D5A947CD0515B923B426E1FD684B
        Validity
            Not Before: Dec 22 04:29:04 2025 GMT
            Not After : Dec 23 05:19:04 2025 GMT
        Subject: CN=C4FAAECFF9B0A62EDC031BF7D0FCF81B42669921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:35:c0:2d:8d:2c:15:4d:aa:a9:74:d7:82:
                    e4:66:44:f9:5c:cc:1e:71:d2:08:c0:3c:73:ef:e2:
                    d6:26:6c:93:5b:9e:79:f6:fc:ef:ec:78:c6:30:4a:
                    a9:42:59:37:5f:dd:75:69:eb:5a:83:63:94:b8:45:
                    69:30:47:91:22:59:52:2a:c0:ce:52:a6:e6:48:b6:
                    57:fb:cf:e4:16:ce:a5:57:44:41:eb:d5:01:96:55:
                    32:c4:e2:d5:9b:0b:88:c7:8a:a4:53:6e:7e:27:bc:
                    77:d3:22:33:d3:78:8e:62:38:97:96:29:79:2a:01:
                    bd:8b:0e:48:1c:52:44:8e:89:a0:04:31:b7:d9:19:
                    cf:ce:8e:7d:65:df:bb:fb:b4:66:bb:0f:a5:a0:b1:
                    e5:7b:06:67:d0:09:a5:31:e3:20:4e:06:71:1b:1c:
                    bb:b0:2f:81:16:35:19:d0:bb:d8:a5:f4:3c:fd:2f:
                    b8:41:4e:8b:fe:9d:b9:34:71:ab:b4:7b:83:81:e6:
                    c0:55:24:b0:d1:9a:c1:3d:15:14:5d:13:c5:15:45:
                    1a:57:8b:2a:7e:c7:17:46:89:e0:cd:be:da:07:ca:
                    cc:f4:40:d2:05:1a:77:f5:a5:e9:d2:d2:f4:75:0e:
                    de:5b:02:e1:60:f3:f7:02:59:0a:8d:e8:3e:47:54:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:AE:CF:F9:B0:A6:2E:DC:03:1B:F7:D0:FC:F8:1B:42:66:99:21
            X509v3 Authority Key Identifier:
                keyid:C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c5:f0:6d:d8:b4:50:23:1e:fa:30:8e:ee:6d:00:67:2a:b7:
         6f:90:ea:27:df:5e:cb:c4:86:23:36:c0:00:06:46:73:08:ed:
         08:84:69:65:e4:44:3a:74:3d:c7:98:5d:f6:31:23:34:08:6f:
         d3:d3:ff:a8:5e:b4:d6:3b:d4:e3:67:fe:09:9e:f7:60:f1:e7:
         95:df:2a:5c:4e:99:c9:a4:00:d0:6d:7a:fe:ed:ef:97:4f:f0:
         74:55:62:3d:f2:3b:a9:08:1e:02:d8:b5:2a:b5:9b:51:17:34:
         0a:ed:08:3e:b0:89:84:9d:2f:1d:9a:52:fe:1f:64:76:2b:88:
         5d:b4:02:b8:38:ba:08:ed:33:b8:40:96:22:f2:b7:a9:a3:38:
         e0:a4:24:26:98:8c:56:fd:56:4b:49:56:76:65:72:a9:36:d6:
         91:8e:67:47:f9:aa:63:ac:7c:b1:3b:af:ab:35:f4:80:4b:98:
         46:95:3f:ae:3c:7c:78:4a:5e:a0:fb:10:03:e9:38:f3:f4:1a:
         20:68:10:62:08:e9:31:a7:58:85:62:46:60:1d:82:a7:7d:b7:
         f0:9d:f3:1a:9e:f2:94:4a:d7:d6:48:4b:97:d3:6a:b4:4d:5e:
         91:19:20:a2:4b:d3:ad:10:6d:86:36:22:73:31:8d:ff:03:05:
         00:78:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:28:14 2025 by rpki-client